Unscored severity · published Feb 14, 2014
CVE-2014-1948
OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when…
–
CVSS
0.3%
EPSS
No
On KEV
Description
OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IR
Image Registry And Delivery Service (glance) · Openstack
2013.2; 2013.2.1 · source: NVD
Affected product
IR
Image Registry And Delivery Service (glance)
Openstack
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-1948
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-1948
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-0229.html
secunia.com
http://secunia.com/advisories/56419
www.openwall.com
http://www.openwall.com/lists/oss-security/2014/02/12/18
www.securityfocus.com
http://www.securityfocus.com/bid/65507
bugs.launchpad.net
https://bugs.launchpad.net/glance/+bug/1275062
More from Image Registry And Delivery Service (glance)
4.3
CVE-2016-0757
OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change…
–
CVE-2015-5286
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of…
–
CVE-2015-5251
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access…
–
CVE-2015-1881
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of…
–
CVE-2014-9684
OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of…